This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft File: hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json) Hash identifier: LeXMMYSuGBKBUEWS/jn+Yz7B2/Tr8j5w7aQquhP2Fu0= Subject key identifier: FA:B4:A2:C2:13:19:57:64:84:64:EC:64:1B:D6:E2:CD:D5:A0:92:FC Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f Certificate serial: 019AF3F7E5EB2BDB4F8F0C515F52DD7B6854 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 14:01:40 +0000 Manifest this update: Sat 06 Dec 2025 14:01:40 +0000 Manifest next update: Sun 07 Dec 2025 14:01:40 +0000 Files and hashes: 1: 1-DR1I-0Q86yRegJRW48TcU9jkak.roa (hash: BbaoF4QpKICKvF2DFJvuoi1HekvHPPg57x8hdzzKsN8=) 2: QRsEK7Mm82AysiVwrsI0fcQwGZk.roa (hash: +14a6gbAtC3j39lO1seQMdbzRZUzjrGGX9KqhXCRQaA=) 3: bMolsew2aNfnwVEKpwDy2jyM58c.roa (hash: 6E9s83W/T6d5cC26/y3n1N8eAzWZSpgeiiEyiR8AjmM=) 4: exOJgZWKhs3CfxljzDJO3y7m_kg.roa (hash: sLEFa7RsALBhT6NfAUon7unSxy37m3yVXscXWcoyxvY=) 5: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: UAiju/Hp7g7eO4E7UBI2XXTEhpvm7E+3V+9Ycv34rMU=) 6: nfEFUPm3YqGp7FQGkGbFir0VX4k.roa (hash: wcnZ1tdaEqbHq23LSrQJa3uBDPQRdB3Kf9OV1V7J1L8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:e5:eb:2b:db:4f:8f:0c:51:5f:52:dd:7b:68:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f Validity Not Before: Dec 6 14:01:40 2025 GMT Not After : Dec 7 14:01:40 2025 GMT Subject: CN=fab4a2c2131957648464ec641bd6e2cdd5a092fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:19:23:94:a9:7b:0c:0f:2e:66:2f:4d:82:5c: 56:02:b7:84:8c:a9:eb:f8:d1:52:61:f8:9e:a3:d6: 6b:05:20:7f:bd:9a:bc:9f:b0:0d:ee:0c:03:da:96: e3:1b:44:07:38:6e:94:75:2e:43:87:f9:6b:2e:7a: de:ee:a6:2a:08:75:25:eb:2c:a1:13:18:a0:24:c6: f6:cb:94:87:9d:aa:9d:5e:0a:27:23:1e:d1:7a:5b: a0:14:9b:30:ad:75:59:8b:79:5d:be:5a:f1:74:93: d3:7f:52:4f:c7:58:02:c3:20:58:43:c6:37:01:48: 81:ec:da:6f:46:0b:5f:09:c3:22:03:1b:fb:ff:57: 9e:3c:d5:c5:57:ca:2e:e6:d3:bc:77:a3:7d:88:37: ef:f1:b2:a2:57:2d:51:4c:2a:3a:69:2d:01:ec:d2: c5:c7:d3:c3:fa:e6:93:2e:b9:88:9e:e4:83:38:64: 06:b9:e6:39:71:02:c4:b8:72:42:e8:00:7f:07:70: ad:54:6c:e5:df:29:b2:48:bc:60:7d:fc:d2:7d:02: 4a:a4:19:6a:05:e3:6d:30:91:9a:6a:69:4a:2a:5d: 8c:1f:50:4c:b6:bd:53:78:75:2c:ae:c1:16:0d:5c: b0:c9:63:e3:41:25:d6:b7:a7:dc:df:aa:fe:03:4c: 7d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B4:A2:C2:13:19:57:64:84:64:EC:64:1B:D6:E2:CD:D5:A0:92:FC X509v3 Authority Key Identifier: keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:62:0b:19:49:7a:67:bf:21:a9:3f:00:52:a1:2e:71:d4:5a: e3:36:80:23:18:59:51:26:84:81:a8:0a:51:95:37:a1:78:26: be:c5:08:e5:37:6f:4d:17:2f:71:cd:4f:48:b7:df:83:98:94: 36:26:0b:6f:b0:70:ef:d5:df:a6:59:6a:8c:4e:75:27:97:df: 1c:7c:82:3b:24:37:3d:c1:83:4b:9a:4a:18:27:7d:4a:3e:67: 33:e4:18:2b:c4:98:04:25:d7:cd:de:67:c6:44:08:4c:11:f1: c0:a4:4f:87:ef:4e:04:a6:45:da:a3:7c:90:08:1f:c8:3a:84: f2:4b:78:36:3e:49:cd:95:17:cd:03:0c:26:7d:bd:80:f6:5a: 4f:bd:83:31:a1:f2:c3:05:f2:03:bd:51:ae:c8:cf:e5:1c:e9: 27:75:95:31:72:ed:f6:5d:f4:07:92:7f:e9:12:53:f2:6d:c3: f0:58:7b:c3:51:80:48:25:30:11:af:33:12:0b:dd:e3:ce:69: 8a:ab:61:56:65:c6:6b:a9:4b:74:1f:81:9d:c1:de:ee:4e:5f: 77:54:d0:0f:03:8f:17:19:7d:7d:7d:1c:3e:a0:04:be:ca:30: ba:f8:3b:d8:59:fd:fe:36:a5:e8:c0:7e:2a:1e:40:df:b2:8d: f0:53:3a:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9+XrK9tPjwxRX1Lde2hUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWM1ODc1MmYzMzM2NDIyZmYwZWUxNzI2NDc0NTkxZTdh NDFlNWYwHhcNMjUxMjA2MTQwMTQwWhcNMjUxMjA3MTQwMTQwWjAzMTEwLwYDVQQD EyhmYWI0YTJjMjEzMTk1NzY0ODQ2NGVjNjQxYmQ2ZTJjZGQ1YTA5MmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxkjlKl7DA8uZi9NglxWAreEjKnr +NFSYfieo9ZrBSB/vZq8n7AN7gwD2pbjG0QHOG6UdS5Dh/lrLnre7qYqCHUl6yyh ExigJMb2y5SHnaqdXgonIx7RelugFJswrXVZi3ldvlrxdJPTf1JPx1gCwyBYQ8Y3 AUiB7NpvRgtfCcMiAxv7/1eePNXFV8ou5tO8d6N9iDfv8bKiVy1RTCo6aS0B7NLF x9PD+uaTLrmInuSDOGQGueY5cQLEuHJC6AB/B3CtVGzl3ymySLxgffzSfQJKpBlq BeNtMJGaamlKKl2MH1BMtr1TeHUsrsEWDVywyWPjQSXWt6fc36r+A0x9RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPq0osITGVdkhGTsZBvW4s3VoJL8MB8GA1UdIwQY MBaAFIRcWHUvMzZCL/DuFyZHRZHnpB5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGUzYWItMjI4Yy00YTIzLTkyMTYt ZjEzNGU1MWNjMDViLzEvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82NGUzYWItMjI4Yy00YTIzLTkyMTYtZjEzNGU1MWNjMDVi LzEvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsGILGUl6 Z78hqT8AUqEucdRa4zaAIxhZUSaEgagKUZU3oXgmvsUI5TdvTRcvcc1PSLffg5iU NiYLb7Bw79XfpllqjE51J5ffHHyCOyQ3PcGDS5pKGCd9Sj5nM+QYK8SYBCXXzd5n xkQITBHxwKRPh+9OBKZF2qN8kAgfyDqE8kt4Nj5JzZUXzQMMJn29gPZaT72DMaHy wwXyA71RrsjP5RzpJ3WVMXLt9l30B5J/6RJT8m3D8Fh7w1GASCUwEa8zEgvd485p iqthVmXGa6lLdB+BncHe7k5fd1TQDwOPFxl9fX0cPqAEvsowuvg72Fn9/jal6MB+ Kh5A37KN8FM6yg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:59:34 2025 by rpki-client